Privilege Accounts and Authentication Services Head

Do you want your voice heard and your actions to count? Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 120,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career. Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

OVERVIEW OF THE DEPARTMENT/SECTION

Corporate Technology is responsible for the operation, development and support of all applications across all areas of the business. Corporate Technology ensures IT strategy, architecture and solutions are aligned to business requirements. This role reports to the CISO and is part of the Risk, Security and Control (RSC) team. RSC are collectively responsible for ensuring IT Security is managed through Identity and Access Management and Cyber Security. Additionally, RSC ensures all risks are recorded and where possible mitigated and IT controls, procedures and policies are implemented successfully.

NUMBER OF DIRECT REPORTS

Twelve

MAIN PURPOSE OF THE ROLE

An exciting opportunity is available to join this group for a senior manager who is very experienced in leadership as well as having a technical background in PAM and IAM. They will lead a team and provide the technical capability to support the creation of a strategic direction for PAM and Authentication along with their tool set, together with supporting and maintaining overall service health, vendor management and ensuring the direction taken aligns with the overall strategic objectives of the organisation.

The team handles day to day management of all CyberArk (PAM) and Authentication needs of the business achieved by the following tools: Active Directory on premise, Entra ID for Cloud & CyberArk. There will need to be close co-ordination with the Access Management Team, so experience in this area would be required. The tool for Access Management is RSA IG&L. All technical documentation and platform standards must be kept up to date and technical direction and strategy must be developed and enhanced as required.

This role will manage the existing highly productive CyberArk and Authentication teams. The successful candidate will be a very experienced Manager and must familiarise themselves with the processes and procedures of the Bank quickly to be able to support and oversee the day to day platform management. They must also provide the team with coaching and mentoring on best practice in the disciplines they are responsible for. Candidates will be expected to articulate complex technical matters in plain English to earn the support of senior management stakeholders and those technically less experienced. The role requires an excellent team player; a self-starter with a motivation and desire to seek out & deliver improvements and a drive to build the team and promote future platform opportunities for approval and funding. Experience of managing personnel both onshore and offshore is essential.

Candidates applying for this role must be able to demonstrate senior management skills, with around 10 years of experience, have an in-depth knowledge of CyberArk, Identity Management, Access Management and Microsoft Active Directory technologies through either a Microsoft Systems Engineer qualification or at least 5 years’ experience working in this speciality. Candidates should also be able to demonstrate practical experience and insight gained through similar roles including in-depth troubleshooting, mentoring and managerial skills.

KEY RESPONSIBILITIES

• Provide strong and experienced leadership.
• Govern and advise on technical direction for Authentication, CyberArk and Access Management, especially through technical workshops and 1:1 coaching sessions, to ensure alignment to business strategy.
• Creation and maintenance of technical guides to convey facts simply and effectively to both peers and those less experienced.
• Daily management and maintenance of the Authentication, CyberArk and Access Management platform, ensuring service availability; health and performance monitoring & alerting and the maintenance of operational & technical documentation.
• Balance technical fact / opinion against business risk / delivered service to provide well thought through guidance to support technical staff with incident; problem investigation and project decisions.
• Proactively initiate investigations for improvements for standard operating processes and procedures, utilising the current owned / licensed tools available, to evidence and escalate issues to the management team. Candidate should be comfortable in communicating with all levels of the management hierarchy.
• Produce and interpret service performance and security data to provide analysis for investigations; baseline performance and trend reports for management to highlight areas of focus / improvement and on-going change.
• Play a leading role in documenting, presenting and using direct communication to map software lifecycle, create work breakdown structures (WBS) and the appropriate supporting documentation to ensure that the software remains current and supportable without disruption to the organisation.
• Lead technical delivery, supporting the programme and project managers delivering specialist tasks to time and cost.
• Work with the problem management function under the ITIL framework to investigate potential issues through to a timely resolution.

MUFG operate a hybrid working policy with 3 days per week in the office. We are open to considering flexible working requests in line with organisational requirements.

MUFG is committed to embracing diversity and building an inclusive culture where all employees are valued, respected and their opinions count. We support the principles of equality, diversity and inclusion in recruitment and employment, and oppose all forms of discrimination on the grounds of age, sex, gender, sexual orientation, disability, pregnancy and maternity, race, gender reassignment, religion or belief and marriage or civil partnership.

We make our recruitment decisions in a non-discriminatory manner in accordance with our commitment to identifying the right skills for the right role and our obligations under the law.